CVE-2019-1723
published 2019-03-13CVE-2019-1723: A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an…
PriorityP269critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
5.82%
92.3th percentile
A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to the affected system using this account. A successful exploit could allow the attacker to log in to the CSPC using the default account. For Cisco CSPC 2.7.x, Cisco fixed this vulnerability in Release 2.7.4.6. For Cisco CSPC 2.8.x, Cisco fixed this vulnerability in Release 2.8.1.2.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_common_services_platform_collector_software | >= unspecified < 2.7.4.6 | 2.7.4.6 |
| cisco | cisco_common_services_platform_collector_software | >= unspecified < 2.8.1.2 | 2.8.1.2 |
| cisco | common_services_platform_collector | >= 2.7.2 < 2.7.4.6 | 2.7.4.6 |
| cisco | common_services_platform_collector | >= 2.8.0 < 2.8.1.2 | 2.8.1.2 |
| cisco | common_services_platform_collector_static_credential | — | — |
| msrc | asp.net_core_3.1 | — | — |
| msrc | asp.net_core_5.0 | — | — |
| msrc | microsoft_visual_studio_2019_version_16.4 | — | — |
| msrc | microsoft_visual_studio_2019_version_16.7 | — | — |
| msrc | microsoft_visual_studio_2019_version_16.8 | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Detect remote login attempts to CSPC using a default, static credential account (non-administrator) — monitor for successful authentication from unexpected/external sources on the CSPC management interface. ↗
- →Flag unauthenticated remote access attempts to Cisco CSPC versions prior to 2.7.4.6 (2.7.x branch) and prior to 2.8.1.2 (2.8.x branch) as potentially exploiting CVE-2019-1723. ↗
- ·A workaround exists per Cisco's advisory in addition to patching; consult the advisory for workaround details. ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco9.8CRITICAL
vendor_msrc7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
ASP.NET Core and Visual Studio Denial of Service Vulnerability
vendor_msrc·2021-01-12·CVSS 7.5
CVE-2021-1723 [HIGH] ASP.NET Core and Visual Studio Denial of Service Vulnerability
ASP.NET Core and Visual Studio Denial of Service Vulnerability
ASP.NET core & .NET core: ASP.NET core & .NET core
Microsoft: Microsoft
Customer Action Required: Yes
Impact: Denial of Service
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Remediation: Release Notes
Reference: https://dotnet.microsoft.com/download/dotnet-core/3.1
Reference: https://dotnet.microsoft.com/download/dotnet/5.0
Reference: https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.4
Reference: http://aka.ms/vs/16/release/latest
Reference: https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.7
Cisco
Cisco Common Services Platform Collector Static Credential Vulnerability
vendor_cisco·2019-03-13·CVSS 9.8
CVE-2019-1723 [CRITICAL] CWE-798 Cisco Common Services Platform Collector Static Credential Vulnerability
Cisco Common Services Platform Collector Static Credential Vulnerability
A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges.
The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to the affected system using this account. A successful exploit could allow the attacker to log in to the CSPC using the default account.
Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.
This advisory is available at
Cisco
Cisco Common Services Platform Collector Static Credential Vulnerability
vendor_cisco·CVSS 3.0
CVE-2019-1723 Cisco Common Services Platform Collector Static Credential Vulnerability
CVE-2019-1723: Cisco Common Services Platform Collector Static Credential Vulnerability
A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to the affected system using this account. A successful exploit could allow the attacker to log in to the CSPC using the default account. Cisco has released software updates that address this vulnerability. There are
CVSS: 3.0
CWE: CWE-798, CWE-798
Bug IDs: CSCvo38510
GHSA
GHSA-8gwv-jhp2-f22w: A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by
ghsa_unreviewed·2022-05-13
CVE-2019-1723 [CRITICAL] CWE-798 GHSA-8gwv-jhp2-f22w: A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by
A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to the affected system using this account. A successful exploit could allow the attacker to log in to the CSPC using the default account. For Cisco CSPC 2.7.x, Cisco fixed this vulnerability in Release 2.7.4.6. For Cisco CSPC 2.8.x, Cisco fixed this vulnerability in Release 2.8.1.2.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/107405https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190313-cspcscvhttps://www.info-sec.ca/advisories/Cisco-Collector.htmlhttp://www.securityfocus.com/bid/107405https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190313-cspcscvhttps://www.info-sec.ca/advisories/Cisco-Collector.html
2019-03-13
Published